Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2270e26b-c2b1-4cc3-800b-33825c0d723b.roa
File: 2270e26b-c2b1-4cc3-800b-33825c0d723b.roa (raw, json)
Hash identifier: xhvPKL57e4y9shICggpjua2q+DlwtVdmi4yzBwlq7MI=
Subject key identifier: 0F:63:55:6E:20:95:D4:80:57:9E:4C:77:44:A6:7E:40:C9:3F:6E:CC
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 042BFEAAE460BC6EDBE3F6FAA7AB8A993A70040C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2270e26b-c2b1-4cc3-800b-33825c0d723b.roa
Signing time: Fri 07 Aug 2026 05:20:54 +0000
ROA not before: Fri 07 Aug 2026 05:20:54 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d06f:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 13:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:2b:fe:aa:e4:60:bc:6e:db:e3:f6:fa:a7:ab:8a:99:3a:70:04:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Aug 7 05:20:54 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=680dc1e9d9f0e1c17cace2e711ea68aa1679c092469f121949b230efb600ba34, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:24:5d:cb:c7:25:bb:3c:50:04:ce:8b:c1:
f5:07:b0:31:d6:a0:9b:e5:53:d2:29:83:4a:9f:ca:
d9:f9:82:25:22:12:cd:c2:95:09:e1:c2:38:09:cc:
6b:e7:d9:06:74:eb:57:58:c8:0f:fc:2f:c0:17:32:
43:71:b3:d6:a4:ea:5f:20:98:3b:cc:dd:29:66:f2:
49:b5:28:c7:c6:c6:e5:57:dc:c7:75:c3:f9:05:3d:
45:0f:a6:fa:c4:bc:fd:4e:28:00:38:c8:70:a8:af:
31:d5:a1:03:8a:b1:81:6f:93:43:d0:1a:65:29:27:
a1:1e:fc:0a:bc:4c:ae:7e:4a:57:6d:c8:5a:17:d7:
d5:84:b6:80:c9:f8:3d:fb:2c:13:4c:35:79:73:1e:
aa:b3:92:00:a6:e2:d1:3a:ff:30:5d:82:a9:e6:13:
1c:29:11:73:f4:a1:50:e7:36:06:da:bb:95:7c:1a:
24:4d:15:24:7b:47:45:ab:d2:f8:29:c2:a4:bd:ad:
79:2c:bb:83:f8:16:59:cc:44:1a:6f:21:de:19:d2:
52:ae:33:1b:3d:77:9f:6a:78:fa:72:0f:f7:92:39:
2d:1c:3b:ac:88:d2:3a:c5:4b:e9:c9:8f:3a:a3:6d:
c1:56:6c:71:c3:b5:90:52:b3:b0:06:33:42:46:08:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:63:55:6E:20:95:D4:80:57:9E:4C:77:44:A6:7E:40:C9:3F:6E:CC
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2270e26b-c2b1-4cc3-800b-33825c0d723b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d06f:b000::/40
Signature Algorithm: sha256WithRSAEncryption
68:15:20:ec:c0:a4:1d:4d:df:f4:2b:da:9e:42:09:60:1e:22:
b6:02:1a:96:5b:26:6e:8d:12:d3:c6:0d:4a:f0:8b:48:3b:43:
2f:f0:bf:09:e5:4e:75:80:f5:02:c2:bc:00:8e:e1:39:c6:76:
f9:01:7e:67:77:30:ce:5a:87:fe:bf:10:d8:ff:04:4d:80:9f:
d3:a8:93:a5:a1:30:c5:db:1a:cd:a4:28:52:78:26:23:e5:49:
e0:54:1a:e9:23:a6:59:31:8d:06:37:b4:8a:03:36:69:2e:05:
a6:99:26:e1:c3:c2:9c:84:34:b0:35:e6:aa:0e:ae:f9:6d:b8:
c4:47:81:33:a7:f8:1c:ca:20:c5:ae:5a:c6:09:c6:1b:9c:07:
1f:72:f6:d4:8d:16:7b:46:85:11:96:d7:50:10:59:d2:0d:a7:
eb:e6:48:7d:cc:a4:17:9f:54:6b:cd:bb:be:1c:1d:3c:ff:31:
50:54:f5:7a:8e:cf:1d:20:d4:cb:1d:56:80:bf:42:45:cb:a3:
a2:32:78:95:c3:c4:e4:7a:25:58:e9:fa:96:c6:92:5e:ae:58:
13:53:4c:4e:8a:d9:e4:33:ef:5a:96:a3:df:46:02:ff:f0:e1:
91:f1:fb:ce:d1:f6:bf:69:fa:0c:ca:02:5c:86:55:7e:5a:56:
bd:20:31:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 21:11:32 2026 by rpki-client